Welcome to MSDN Blogs Sign in | Join | Help

Application Security Arena

Nimrod Luria
Microsoft ACE Team

February 2007 - Posts

Migration path to WCF
From .NET Remoting to the Windows Communication Foundation (WCF) http://msdn.microsoft.com/library/en-us/dnvs05/html/NETremoteWCF.asp?frame=true ASP.NET Web services to the Windows Communication Foundation http://wcf.netfx3.com/content/TheFutureofASPNETWebServicesintheContextoftheWindowsCommunicationFoundation.aspx Read More...
how to get AlternativeName and UPN from X509 certificate
using X509NameType Enumeration you can extract all the fields from a x509 certificate. this enum is new for .net 2.0 here is the code: using System; using System.Security.Cryptography; using System.Security.Permissions; using System.IO; using System.Security.Cryptography.X509Certificates; Read More...
more about ajax security
http://blogs.ittoolbox.com/security/dmorrill/archives/billy-hoffman-on-ajax-security-11141 some videos can be found here: http://www.asp.net/learn/videos/#ajax Read More...
defend - protect - detect - recover - manage !
in order to know how do detect and attack and protect you should first understand the attack ! a very useful link for that: http://www.attacklabs.com/ Read More...
Netmon 3 - Nmcap.exe
Network monitor 3.0 has a command line tool as well to capture traffic. You can use the ‘Nmcap.exe’ tool to capture frames without the GUI. This tool is available in the Network Monitor 3 installation directory. I'm looking for a way now to intercept Read More...
XSS and HTML injection attacks
just copy and paste to implement an XSS. sources can be found here : http://ha.ckers.org/xss.html Read More...
S E C U R E Acrostic
S eamless The more integration work that has to be done to get a component to work, the more opportunities to introduce unintended errors which can result in security vulnerabilities. Secure code should therefore not require any special skills to incorporate. Read More...
Download Network monitor 3 Now !
Download Microsoft Network Monitor (netmon) 3.0 Microsoft Network Monitor 3.0 is a brand new protocol analysis tool. It has been under development for about 2 years at Microsoft. You are welcome to try it out and provide feedback to us. Key features of Read More...
reflector 5
check out the new version of reflector here Read More...
Guidance Explorer is here for security
Great tool from P&P that can help you to implement security issues in your code and servers. the tool can be download from http://channel9.msdn.com/wiki/default.aspx/GuidanceLibrary.GuidanceExplorer and include a lot of how to's that refer to security Read More...
Welcome to my Blog
Hi, My Name is Nimrod Luria and I'm a consultant at the ACE team. at the next few days i will transfer all my posts to here from my old blog. more about the ACE team can be found here: http://blogs.msdn.com/ace_team/ my old blog can be found here Read More...
Page view tracker